Firefox3 User-Agent spoofing

Aka "How to use an online banking website by fooling them into using an unsupported browser".
Natwest check the User-Agent string of the browser, and block ones they dislike.
So, enter about:config in the firefox3 URL line, right-click on the list that appears, click on "New - String", enter general.useragent.override and for the string, enter one of the following common user agents:
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.12) Gecko/20080213 Firefox/2.0.0.12
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Then check the result.
This method works with firefox 3.0b3-3.
Edit: Modify Headers does the same thing and works with firefox3, but is not necessary.
Last edited by brebs (2008-03-10 19:44:46)

xsdnyd wrote:general.useragent.override
Thanks, I've altered the first post to use that instead
CNN seems OK with a spoofed user agent.
Last edited by brebs (2008-03-10 20:11:46)

Similar Messages

  • Creative Cloud User Agent String spoofing old Chrome Browser?

    Was troubleshooting Creative Cloud not working on our network and noticed it is spoofing an old Chrome browser User Agent String.
    When Creative Cloud launches it presents itself as: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.68 Safari/537.22
    This is the user agent string of Google Chrome version 25 (Chrome is currently at version 32)
    Looking for any information on why Creative Cloud is using an old Chrome user agent string, and why can't it use a unique user agent?

    Creative Cloud chat support (all Creative Cloud customer service issues)
    http://helpx.adobe.com/x-productkb/global/service-ccm.html

  • Browser with spoofed user agent?

    Hi, Does anybody know any -GOOD- mobile internet browser that can allow spoofing the user agent? I hate it when sites redirect to their mobile version based on the user agent of the web browser someone is using.
    I know that Opera Mobile allows spoofing the user agent, but on many websites I am still being redirected to the mobile version.
    I just want the full non-mobile version of the website, FFS.
    Any help is appreciated. Thanks.

    Hm, nevermind, I think I have resolved the issue with Skyfire.

  • Trying to get Firefox to open in User Agent "Internet Explorer"

    I run an Internet Cafe and have recently installed Ubuntu 10.04 over Micro$oft.
    I HAVE to give customers an alternative to Live Messenger.
    I have TokBox setup .. but gives problems now & then.
    I need to cover all bases or lose customers.
    The only viable alternative I have found is '''EBuddy'''.
    Now the problem is .. when I log in using Internet Explorer and I connect to a contact - I can see the start video call "button".
    Any other browser and the webcam button does not show.
    All of the Firefox & Seamonkey User Agent Switchers I have tried work .. but I cannot expect the customer to know that they need to switch User Agent before they can use the webcam.
    I need to Launch either Firefox or Seamonkey (preferably Seamonkey - if the fix is to be a permanent one) in Internet Explorer mode.
    A permanent "fix" for Firefox was suggested on the Ubuntu Forum ...
    1. Open about:config
    2. Right-click, choose "New" > "String"
    3. Type "general.useragent.override" (no parentheses) into the "New String Value" dialog box that appears and press "Enter." Type or copy and paste the desired new user agent string into the "Enter String Value" box (in this case "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)" )
    When you're done, copy that Firefox profile to all of your computers (the .mozilla folder)
    I tried this on Seamonkey .. but it did not have the desired effect = no start video call button.
    There is a Proxy Tool add on for Seamonkey which can change the user agent and this works. Same thing for Firefox.
    But the user agent is back to default on browser re-start.
    In an ideal world I would like to create a Launcher on Ubuntu desktop which would open either Firefox or Seamonkey on the E Buddy sign in page and the User Agent would automatically be set to IE8 or 9.

    Try to set the user agent via a user.js file.
    *http://kb.mozillazine.org/user.js_file
    user_pref("general.useragent.override", "<IE user agent>");

  • Is there a way to change my user agent from Safari to Internet Explorer?

    Hello All,
    I need to fill out a application on line and it appears that it does not recognize Safari.  Sounds like it needs to see IE.  Anyway to temporarily enable IE for this application?  Otherwise I have to go use a PC at the local library....
    These instructions below in no way match my Snow Leopard 10.6.8 on my iMac - they don't make sense to me.  Any help/guidance is appreciated to fill out this on-line form.  Thanks!
    Apple Safari
    If using Safari, you must have Internet Explorer 6.0 or higher version or Firefox 2.0.0.12 - Macversion web browser at the "User Agent" category or higher for Firefox. Use the following instructions to configure your Safari browser to access e-QIP.
    On the Menu Bar
    Select Edit box (top of screen)
    Preferences
    Security
    Accept Cookies (only from site that you navigate to)
    Advanced
    Check the box labeled "Show Develop Menu in Menu Bar"
    Click proxies - Change settings box (Opens to Internet Explorer (IE) Properties Boxes)
    Advanced tab
    Security category is located near bottom of page
    Click "Do not save encrypted pages to disk"
    Click "Empty Temporary Internet Files folder when browser is closed"
    Click/enable SSL 2.0
    SSL 3.0
    TLS.1
    Exit Preferences Window
    On Menu Bar select "Develop User Agent"

    John..
    This may work but no guarantees ..
    Launch Safari. From the Safari menu bar top of your screen click Safari. From the drop down menu click Preferences then select the Advanced tab.
    Select:  Show Develop menu in menu bar
    Now from the Safari menu bar again, click Develop > User Agent
    Try IE 7, 8, or 9.

  • Configuration issue in IE as Document mode: 10 and User agent String: Internet Explorer 8

    Hi,
    I have a telerik rad popup window performing some input operation. The problem is when I use the configuration in IE as Document mode: 10 and User
    agent String: Internet Explorer 8, scroll bars appear in the window from nowhere. It is working fine with every other configuration of IE. I've also used a separate stylesheet for IE 8 but it won't apply in this case. 
    Here are the screen shots of the window.
    Actual view
    With Scorllbar
    Please if anybody could suggest a solution for this weird problem it would be a great help.
    Thanks in advance.
    Neelesh

    Hi,
    It seems we need to talk with the site developers to determine how the sheet would display with different IE user agent string.
    Regarding the user agent string changes, please take a check with the following article:
    Introducing IE9’s User Agent String
    The Internet Explorer 8 User-Agent String (Updated Edition)
    Hope this may help
    Best regards
    Michael Shao
    TechNet Community Support

  • ISE 1.2 Profiling - User Agent attribute incorrect

    Hi all,
    Just troubleshooting some profiling issues and have found that multiple devices are profiling incorrectly eg MAC OSX profiling as Apple-Device. Basically the issue is the user-agent string profiled by ISE is incorrect meaning that only the OUI is matched. During the BYOD onboarding process, non Internet Browser, applications and services (games and OCSP Daemons etc) are presenting their specific user-agent strings eg "OCSPD\1.0.2" to ISE resulting in incorrect profiling.
    Does anybody have any suggestions on how to resolve this issue as it is resulting in about 50% of devices been profiled at the "top level" ie Apple-Device or Windows Workstation (anything based on User-Agent). Can any one explain whether profiler works on the basis of first agent received, last agent received and why it doesn't hold onto a list of presented agents to make a decision? In my mind this is a pretty big issue in that some of the more popular device profiling policies are based on a user-agent string thus potentially preventing you from defining tight Authz policies eg IPAD only etc

    "Unless you have suppression configured, ISE will continue to collect profiling data and will re-profile a device as long as a rule with higher certainty factor is hit. However, if the certainty factor is the same the device will remain at its originally profiled group."
    The suppression feature will not affect the re-profiling of a device.  The suppression only affects the logging on the MnT node.  Since the Profiling is a PSN function the suppression has no affect on the outcome of a profiling event. 
    You are correct in that a rule with a higher certainty factor "wins" and this is the profile that is chosen.  Again, an understanding of how profiles work is not the issue here.  
    For example say only the RADIUS and HTTP probes are being utilized for an endpoint.  There are two endpoints one is a iPad and the other an iPhone.  The endpoint attributes that are known about the device are the MAC OUI and the useragent. 
    Based on the default profiling rules there are two three things that need to be identified either an iPhone or an iPad.  The first common item is that the MAC OUI is identified as apple.  This increases the certainty factor by 10.  The second is either the HTTP User agent containing either iPad/iPhone or the DHCP hostname containing either iPad/iPhone.  Both of those conditions would increase the certainty factor by 20 for a total of 30.  Since DHCP is not being used in this example we can remove that for a possibility and say that for an iPhone to be profiled as an iPhone it must both have a MAC OUI of apple and the useragent must contain iPhone.  Same goes for iPad, but iPad in the useragent. 
    Like smcbridebpc stated every application that uses HTTP will have a useragent string.  The profiler rules assume that the useragent that is being used contains either the word iPhone or iPad to distinguish these types of devices.  If an application on the device sends a useragent string such as  "OCSPD\1.0.2" which is obviously the OCSP Daemon.  This useragent string is "stuck" on the endpoint and no other usable useragents can be used to profile the device.  Therefore a race condition exists and depending on the application that wins determines if the profiler will be accurate or not.   
    The only two solutions that I can think of would be to have a useragent filter that would allow you to manually filter out useragents like "OCSPD\1.0.2" (or the ISE developers could filter known unusable user agents out on the backend)  OR everytime a new useragent is presented to the profiler for a device the useragent is joined to a list of useragents. 
    If the useragent was overwritten everytime a new useragent was presented then it would cause the device to be reclassified everytime the different applications presented useragents which would not be good.  
    It does look like a bug may have been filed and marked as fixed in release pending, but the bug notes do not list enough information to identify if this is the same issue that we are seeing.
    https://tools.cisco.com/bugsearch/bug/CSCuj45373

  • The User-Agent "Java/1.5.0_06" is unknown;creating an agent with null agent

    Hello,
    We're currently on JDeveloper 10.1.3.4.0.4270. We just release a new version of our web app into production. This is an internal web application. application server is weblogic 10. The weblogic log is showing alot of these warning messages. I tried search on this forum and in google but unable to find any information. I really appreciate if anyone has any idea what could be causing these warning. Our users are constantly getting sent back to the login page to to user sessions lost.
    <Jun 8, 2010 12:39:20 AM EDT> <Info> <Common> <BEA-000628> <Created "5" resources for pool "venusDS", out of which "5" are available and "0" are unavailable.>
    Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    1698656.832: [GC [PSYoungGen: 145280K->5811K(187264K)] 418915K->302441K(650112K), 0.1285455 secs]
    Jun 8, 2010 12:42:22 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
    WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
    Thanks,
    Joe

    Hi,
    user agent is the browser users use. So what is the browser ?
    Frank

  • Have an old web site that I need access. IE 7 or earlier works Firefox 3 or 4 does not. User agent switcher used to have older versions listed but doesn't now. Any other ideas?

    This is an old app to a server that will have no software updates. I can get logged in but when I try to go to any other page within the app it displays about 8 lines of WWWWWWW along the left side of the window followed by my username and message "Please wait page is loading". It never loads. App works with IE7 or older but have never successfully gotten Firefox 3 or 4 to work. Have had some success with User Agent Switcher Add On with some other apps in the past but it now doesn't show browser versions going back far enough to try them.

    I can't guarantee anything, but there's a website that offers old versions of Firefox back to 0.8, so it should have what you need. :-)
    http //www oldapps com/firefox php
    Good luck!
    edit: This is a unofficial download site and not safe. No need for it as Mozilla hosts all since beginning for public access.

  • How to get iphones / ipad user agent for internet access

    Hi.
    We recently setup some wireless, and I'm wondering how I can get iphones and ipads connected to the internet without prompting for a username and password. Even if it does prompt and we put in our domain credentials, things don't work.. it's like it heavily restricts access. However if you put DOMAINNAME\ in front of your user name, then it seems to work.
    Without making static IP reservations and attaching those ip's to no authentication in IronPort... isn't there a way to assign these devices to a policy via their user agent string? Problem is finding that string amongst different versions of iphones and ipads.
    I visited www.ipchicken.com on my iphone and it said Browser: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us)
    AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5
    What part of this do I copy into the user agents field for my no autnentication identity that I'm trying to alter? I tried putting AppleWebKit in, but it still blocks almost everything.
    Right now in this Allowed User Agents identiy i have Windows Update checked, as well as these:
    (MSOffice\x2014)
    Microsoft NCSI
    SSLSoapClient
    AppleWebKit (does not seem to work)
    Thanks for the help!

    I think I figured it out.  Followed this closely:
    https://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=1426&p_sid=ODIeCGuk&p_lva=1713&p_li=cF91c2VyaWQ9MXJvblAwcnQmcF9wYXNzd2Q9Zm8wQmE1
    Also do you guys know if the custom user agent field can accept wildcards?  Problem is, every version of iOS for iPhone 1, 3G, 3GS, 4, and iPad 1 & 2, or ipod touch (various generations) all have variations in their user strings.  If I could just do a blanket statement for like *iphone* , *ipad*, etc.... that would be easier.
    So are there any wildcards or txt masks that can be put in and interpreted in the custom user agents field?

  • How to retrieve which user-agent in a java portlet?

    Is there a way to get http user-agent info about which browser requested a page with a portlet from within the java portlet?
    It seems like the request.getHeader() always returns the same value no matter what browser we use.
    Have also tried portletRenderRequest.getOriginalHeader() but this method also returns the same result.
    Does the PPE replace these headers or what..?
    Regards,
    Per A Jorgensen

    Hi Per A Jorgensen,
    I see what you mean. I just deployed a simple portlet which displays the user-agent header property.
    Here are my observations:
    1. If you access the page as user1 from Mozilla, I see the following:
    Browser Agent:      Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    2. If I now access this page from IE, as user1, then I still see my browser agent as:
    Browser Agent:      Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    3. If I now access this page from IE, as user2, then i see the following details:
    Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    4. Now I access the same page from Mozilla (after logging out of user1) as user2, I see the following:
    Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
    Hmm.. interesting.. it looks like, whoever access the provider first, fixes the user-agent. I need to investigate more into it to find out information as to why this is happening.
    In the mean-time, you can be rest assured that as long as you dont have multiple user's accessing the portlet as the same user, you will get the correct information.
    thanks,
    Harsha

  • How to delete User-Agent header field from http request ?

    Hi,
    I'm currently using HttpUrlConnection to create a HTTP 1.1 POST client, and I wish to remove the User-Agent field from my request.
    However, java seems to set this field to "java.1.4.2" if none is provided.
    I have found methods to modify the User-Agent ( "setRequestProperty()" and system property "http.agent" ) but none to delete it.
    Is there a way to remove this header from the request ?
    This field is said as "should be implemented" but is not required in rfc2616(http1.1), so I'm a bit surprised that I can't remove it in the java HttpUrlConnection...
    Thank you for your help,
    Gregoire

    You can always go around java.net.HttpUrlConnection with your own subclass of UrlConnection or simply a socket. You may lose some functionality, for example with handling binary content, but it may still be a solution.
    (But are you saying that the server requires that there's no user-agent header? That's not a case of incompatibility, it's a bug. Scrap the server, and get one that works.
    It seems a lot more likely that the server just have strict ideas of what user agents it wants to talk to. Then instead of removing the header, you want to find out what values the server will expect.)

  • Content repository FD does not exist :user agent sap web application server

    Hi All
    i am using 3rd party software(dms SERVER) and connecting it using archive link interface SAP HTTP 4.5 AL
    i have created a new repository with name FD using tcode OAC0.when i give inputs in OACO and click on test connection it gives me information Content repository FD does not exist
    here is my HTTP trace at receiver content server side
    TRACE:(5) - GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
    TRACE:(5) - user-agent: SAP Web Application Server (1.0;700)
    TRACE:(5) - host: SERVERIP:PORT
    TRACE:(5) - accept-encoding: gzip
    TRACE:(5) -
    --> C05 --> S06 ==== (15.583) Request <GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0>
    --> C05 --> S06 GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
    --> C05 --> S06 user-agent: SAP Web Application Server (1.0;700)
    --> C05 --> S06 host: SERVERIP:PORT
    --> C05 --> S06 accept-encoding: gzip
    --> C05 --> S06 ==== Body 0 bytes
    --> C05 --> S06 Body =>
    Sockets 6 of 4,5,6 need checking ####
    TRACE:(6) - HTTP/1.1 200 OK
    TRACE:(6) - Cache-Control: private
    TRACE:(6) - Content-Length: 189
    TRACE:(6) - Content-Type: text/plain; charset=utf-8
    TRACE:(6) - Server: Microsoft-IIS/7.5
    TRACE:(6) - X-AspNet-Version: 2.0.50727
    TRACE:(6) - boundary:
    TRACE:(6) - X-dateC: 2010-10-22
    TRACE:(6) - X-timeC: 07:07:23
    TRACE:(6) - X-dateM: 2010-10-22
    TRACE:(6) - X-timeM: 07:07:23
    TRACE:(6) - X-contentRep: FD
    TRACE:(6) - X-numberComps: 1
    TRACE:(6) - X-docId: 0
    TRACE:(6) - X-docStatus: online
    TRACE:(6) - X-pVersion: 0045
    TRACE:(6) - X-ContentServer: contentServer=Server ip;contentServerPort='9025;pVersion='0045';id='DMSSRV1'
    TRACE:(6) - X-Powered-By: ASP.NET
    TRACE:(6) - Date: Fri, 22 Oct 2010 13:37:23 GMT
    TRACE:(6) - Connection: close
    TRACE:(6) -
    TRACE:(6) - serverType='DMSSRV1';1;serverVersion=12;serverPatch=0;serverBuild=180;pVersion='0045';serverStatus=running;serverStatusDescription=;serverDate='2010-10-22';serverTime='07:07:23';startUpDate='2010-10-22';startUpTime='07:07:23';lastAccessDate='2010-10-22';lastAccessTime='07:07:23';contRep='FD';contRepStatus=defined;contRepStatusDescription=;contRepDescription=Content-Repository Test;contentStorageHost=localhost;contentStorageName=FD;secKeyVerification=y;defaultDocProt=rucd;
    one change which i have observed in this trace is .. this trace is showing trace agent as SAP Web application server ... ideally it should show user agent :SAP HTTP
    Please suggest me some solution.
    Thanks
    sandeep

    Dear all,
    my issue is resolved.I solved my issue myself
    solution: SAP sends HTTP request in the form of URL like
    http://serverip:port/GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
    Now your response should contain string  contRep="FD"
    dont forget double quotes on repository name coz SAP program matches string with double quotes. if you will return value like this contRep=FD
    this will through error.
    Thanks
    sandeep sharma

  • How to Set User-Agent in UIWebView?

    I tried to change User-Agent using NSMutableURLRequest in the UIWebView delegate function, but didn't work. The funny thing is...the User-Agent string changed if the request is redirect. Have anyone experienced it? I want to change User-Agent of every request from UIWebView to the same like coming from Safari browser. Please HELP!!

    I would try the Apple Developer Connection, this forum is for users of the iPhone, you aren't going to get much help with this.

  • How to create a mail user agent by using JAVA...

    my lecturer has asked me to create a mail user agent by using JAVA , i have no idea how to start this assignment......

    What part are you stuck on? Creating a GUI (look at the Swing tutorials), or writing the talk-to-mail-server bit? Look at Java Mail, or the email RFCs.

Maybe you are looking for